Analysis
- max time kernel
38s - max time network
41s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/09/2026, 19:34
Static task
static1
Behavioral task
behavioral1
Sample
5316e27123000ba8d68e3bb74474c97f2b6032c7862568e30a89c0e8d2660634.sys
Resource
win10v2004-20260911-en
1 signatures
40 seconds
General
- Target 5316e27123000ba8d68e3bb74474c97f2b6032c7862568e30a89c0e8d2660634.sys
- Size 37KB
- Sample260922-yadjpsea24
- SHA256 5316e27123000ba8d68e3bb74474c97f2b6032c7862568e30a89c0e8d2660634
- MD5 b00bfbdc152bc2e3f19336e340d7a0a2
- SHA1 ab87ef0f0e9d5fa5d1553c0e9623935bc0a376c8
- SHA512 2655370c32dc456177dee272edf7408a9a11819f4e26679a5ce766ff04f036fe0e4f174a45677cfcbcca33ba3dcb85c7c576bc7766be9b726fc45582f1b2cdae
- SSDEEP 768:My2ZKY0j23v1lnJmk7h1QMzdibwWDeKEI3iFl9zb:yrDNlnrhDzkbl2IK3zb
- TLSH T1B8038D52A6A414C4EAAEE9B0C170DE27E9B5B14A572196CF03B4CDA40F733D0E63D35E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 3192 cmd.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\5316e27123000ba8d68e3bb74474c97f2b6032c7862568e30a89c0e8d2660634.sys1⤵
- Executes a command shell one-liner
PID:3192 -
C:\Users\Admin\AppData\Local\Temp\5316e27123000ba8d68e3bb74474c97f2b6032c7862568e30a89c0e8d2660634.sysC:\Users\Admin\AppData\Local\Temp\5316e27123000ba8d68e3bb74474c97f2b6032c7862568e30a89c0e8d2660634.sys2⤵PID:1576
-